Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/P2rI6-JdfGVAIeQuMfA7vwyalNc.roa
File: P2rI6-JdfGVAIeQuMfA7vwyalNc.roa (raw, json)
Hash identifier: AKGKR8Wx4Xod3oe8KgK2p9RHt0XM89HrpVgsZPwkJAQ=
Subject key identifier: 3F:6A:C8:EB:E2:5D:7C:65:40:21:E4:2E:31:F0:3B:BF:0C:9A:94:D7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01912521E9F18C817F11B768E83F74E67951
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/P2rI6-JdfGVAIeQuMfA7vwyalNc.roa
Signing time: Tue 06 Aug 2024 00:41:05 +0000
ROA not before: Tue 06 Aug 2024 00:41:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214645
IP address blocks: 2a0e:97c0:3b0::/48 maxlen: 48
2a0e:97c0:3b1::/48 maxlen: 48
2a0e:97c0:3b2::/48 maxlen: 48
2a0e:97c0:3b3::/48 maxlen: 48
2a0e:97c0:3b5::/48 maxlen: 48
2a0e:97c0:3b6::/48 maxlen: 48
2a0e:97c0:3b7::/48 maxlen: 48
2a0e:97c0:3b8::/48 maxlen: 48
2a0e:97c0:3b9::/48 maxlen: 48
2a0e:97c0:3ba::/48 maxlen: 48
2a0e:97c0:3bb::/48 maxlen: 48
2a0e:97c0:3bc::/48 maxlen: 48
2a0e:97c0:3be::/48 maxlen: 48
2a0e:97c0:3bf::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Aug 2024 06:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:25:21:e9:f1:8c:81:7f:11:b7:68:e8:3f:74:e6:79:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 6 00:41:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f6ac8ebe25d7c654021e42e31f03bbf0c9a94d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:f1:01:a6:c3:36:3c:0c:2c:01:aa:92:7e:
9c:d9:46:cd:49:4f:9c:1f:eb:5e:bf:f9:b8:e0:d4:
f7:4a:db:63:94:b5:fb:e7:50:c3:c6:50:7f:79:17:
db:4b:94:a8:04:ed:b8:c4:bd:7d:58:63:50:b7:a3:
0a:0b:3a:b8:80:ba:ea:55:66:15:0a:a3:2a:14:60:
0b:1f:7d:b0:29:6f:1f:8c:2f:83:0f:de:35:ca:1a:
4c:ea:b8:ab:0d:ee:5f:e9:c3:09:73:75:70:6c:fe:
22:87:b7:20:36:99:5c:2f:0b:b2:90:c1:40:46:9f:
88:b6:57:b2:2b:1b:d2:fd:d9:aa:ca:26:4a:c9:7f:
80:d1:aa:d9:55:9f:4d:ca:22:4f:ad:2f:6c:59:d9:
1a:aa:b8:36:32:86:a6:91:95:cf:11:c7:d3:e8:96:
90:3a:72:3e:9d:a8:a4:26:4e:bd:27:c8:db:be:45:
2e:12:b2:c4:6f:23:ff:7a:fa:33:ef:ee:dd:b0:78:
89:02:82:95:3d:b3:4f:a5:42:e9:81:86:44:48:50:
f6:74:76:f1:31:43:d6:ca:98:cf:43:f3:13:5b:be:
d6:aa:4d:9e:78:4a:78:22:07:f1:cc:3c:37:05:a2:
3a:b9:bc:5f:2b:f2:6d:bb:63:15:d4:3e:63:8d:ab:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6A:C8:EB:E2:5D:7C:65:40:21:E4:2E:31:F0:3B:BF:0C:9A:94:D7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/P2rI6-JdfGVAIeQuMfA7vwyalNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3b0::/46
2a0e:97c0:3b5::-2a0e:97c0:3bc:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:3be::/47
Signature Algorithm: sha256WithRSAEncryption
c2:48:1a:5e:e2:a2:0d:e7:4f:11:6b:e1:91:20:14:91:05:a5:
d0:a9:ee:10:a2:43:b3:0c:00:10:4a:33:19:b0:85:2a:b5:d1:
35:a9:ac:a7:63:b6:18:60:52:e1:46:7c:e0:2c:58:1e:b2:4d:
6e:39:96:a3:f9:61:3b:86:5e:45:f3:96:af:44:e6:d4:16:7a:
aa:75:f3:64:d6:f4:5d:4a:ca:6e:0f:73:00:9f:84:c9:29:37:
f7:2b:2b:e2:4b:b0:36:a2:62:95:19:80:19:6e:9d:35:46:b8:
39:ff:02:2f:e0:5e:4c:10:30:01:db:19:fc:85:74:e5:da:bc:
f4:81:cd:47:a7:08:a1:c4:fd:a2:38:c2:dc:8a:80:2b:a0:0c:
13:2b:4a:3f:90:09:48:52:3e:d4:a6:3d:30:4f:f9:2c:c6:ab:
47:2b:56:d6:13:d1:b8:33:22:86:19:e5:e4:db:16:d3:72:40:
9d:34:1e:ce:c0:01:e9:55:11:43:6e:45:72:f6:a2:70:98:c2:
78:f3:61:cd:ee:bb:a8:44:bd:ed:b5:77:62:3a:30:25:c6:58:
84:d3:9a:c3:2e:c0:ef:99:97:d2:89:c7:65:86:36:de:d0:7a:
2e:6f:ea:61:81:e4:d7:98:b2:65:a7:89:78:90:72:eb:1a:63:
43:0c:9a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 09:30:04 2024 by rpki-client on console-ams.rpki-client.org